Описание
Code Injection in SEOmatic
In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.
Пакеты
Наименование
nystudio107/craft-seomatic
composer
Затронутые версииВерсия исправления
< 3.4.11
3.4.11
Связанные уязвимости
CVSS3: 9.8
nvd
больше 3 лет назад
In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.